the new controlchan (+gpgverify)

greg andruk supersede at
Thu Feb 8 05:54:41 UTC 2001

In nnfolder+Mail:inn-workers, Russ Allbery <rra at> wrote:

>> It doesn't want to require a file before the path has been sanitized.  

> ...I don't understand the reason for this.  require has nothing to do with
> the path.

Sorry, I explained that poorly.  It's the `open F, ...' in the
convoluted eval substitute that elicits the insecure $ENV{PATH}
screaming, and I'm not sure if it's a good idea for innshellvars to be
mucking with the path behind the back of the calling script to get
around it.

More information about the inn-workers mailing list